[arjunpredev]

Documents the CLI guardrails shipped in predev-agent 1064ce4f4:

• In the CLI app, pre.dev asks before writing outside the current directory, reading .env and key files, using production Doppler credentials, or stopping processes by name. The choices are Allow once or Allow for the rest of this session.
• predev run / predev -p refuse those actions, and the person's Chrome and connected accounts, unless --allow writes,secrets,prod,kill,browser,integrations, --allow all, or PREDEV_ALLOW permits them.
• pre.dev never changes agent, shell or git settings or credentials, and command output that looks like a secret is redacted.

Adds a section to cli/overview.mdx and a 2026-10-22 changelog entry.

🤖 Generated with Claude Code